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(57) Abstract: In a peer tOrpeer network having a plurality of 
user teiTriihals; each capable of serving as a user authentication 
site for other terminals of the net work arid haying an open side of 
a -firewall and a secure side of the firewally a method; for authen- 
ticating a ; user:x A ^ authentication database is stored in mern- 
ori es i ri the secure side of ttrsl and second temii nals of the riet- 
worki The first terminal receives a password from the user, and 
translates the password into ah authenticatipn encryption key for 
t he user. Trie; fi rst terminal generates a: first rahdorn iriu rhben en- 
crypts trie first random number with the authentication encryp- 
tion key to provide a firet encrypted message, and transmits the 
first encrypted message to the second terminal, which serves as 
a usein aut^entirati . Th^ ^r authen- 

tication site decrypts the encrypted first message to provide the 
first, random jhu number, 
which is transmitted to the first terminal/ The first terminal com- 
bines- arid epcryrjts toe first and second random numfers, with 
the authenticati on encryption key* to provide a second encrypted 
message. ^ mes- 
sage tothe user authentication site, which decry pis the encrypted : 
second message 19 provide the combined first and second ran- 
dom numbers: The user authentication site verifies that the first 
and second random numbers are correct, and authenticates the 
user in accordance with this verification. 
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